[SPARK-37774] Upgrade log4j from 2.17 to 2.17.1

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.0
• Fix Version/s: 3.3.0
• Component/s: Build
• Assignee: Chia-Ping Tsai
• Reporter: Chia-Ping Tsai
• Created: 29/Dec/21 05:09
• Updated: 05/Jan/22 04:25
• Resolved: 29/Dec/21 07:25

Description

There is another CVE (CVE-2021-44832) in 2.17 (https://issues.apache.org/jira/browse/LOG4J2-3293)

Issue Links

• links to: [Github] Pull Request #35051 (chia7712)